daniel:// stenberg://

1 year ago

daniel:// stenberg://
1 year ago

and here I get into a discussion about why we don't show off the "OpenSSF scorecard" in #curl

(tldr: it's wrong)

Scorecard integration from Open Source Security Foundation · curl curl · Discussion #12609

Hi, Me and a group of friends want to participate in the "Secure Open Source Rewards (SOS)" program from the Open Source Security Foundation. All of us are newbies in the open source comunity contr...

^GitHub

#curl

in reply to daniel:// stenberg://

Marek

in reply to daniel:// stenberg:// 1 year ago

And the whole thing is only for GitHub repos. Free alternatives such as Codeberg are not supported😭😨

in reply to Marek

daniel:// stenberg://

in reply to Marek 1 year ago

@mark22k presumably it would just be to extend the script. But doing this with a script is severely limited to begin with so I'm not holding my breath for this to become a good system

@Marek

in reply to daniel:// stenberg://

Marek

in reply to daniel:// stenberg:// 1 year ago

But I think you should also bear in mind that Gitea and GitHub use different APIs - that would have to be quite a big extension.

in reply to Marek

daniel:// stenberg://

in reply to Marek 1 year ago

@mark22k I don't know this but in the grand scheme of things, surely a few API differences is not a deal-breaker if someone *really* wanted to do this

@Marek

in reply to daniel:// stenberg://

Urix Turing

in reply to daniel:// stenberg:// 1 year ago

I'm not sure if people whose motivation is to collect rewards are hurting more than helping OSS

in reply to daniel:// stenberg://

David Lord

in reply to daniel:// stenberg:// 1 year ago

This is the same reason I don't show it for Flask. The general idea behind it, "be aware of these issues and processes", is good, but the execution of it is not.

⇧

daniel:// stenberg:// 1 year ago • •

daniel:// stenberg://
1 year ago